Hi! Afaik, NTLM can only be uses with mixed mode domains, not with pure 2000/2004 domains servers. in that case one can use the apache kerberos module which also supports single sign and !IE browsers. it is quite difficult to set up if you never used kerberos before, but once it works.... robert